Messages

1

Reverse Engineering / Re: DIGIC 8 DryOS Shell (drysh) investigation

« on: October 28, 2021, 09:07:24 AM »

Any one know method for getting ROM menu on working camera? There is useful console for reading-writing Flash ROM, it launches on flash integrity fail.
I need to transfer entire FLASH ROM contents (both ROM chips) from working camera to soft-dead camera (Canon 5D2). On dead camera I can boot to Flash ROM console, due integrity fail and perform fullflash. On working camera I cant. All that I reached is to launch "Command Menu" "Detail Analisys Menu" and shorting RAM data lines on startup. Those tools can dump memory by 4 bytes, but it will took too much time.

2

Reverse Engineering / Re: Battery grip pins / UART

« on: October 28, 2021, 09:00:22 AM »

Not found yet working UART pinout for Canon 5D mark II (I need it for repair purpose) and here is one:

Also I digged JTAG pinout, but haven't checked it yet.
Also here is JTAG and UART pinout for processors used in old cameras:Digic 4 CK4-1249 and Digic 4 CH4-6405 (they are same at this small part)